Open Directory Plug-in Programming Guide

Authentication

If an Open Directory plug-in is going to support authentication, at minimum, it should support node native, change password, and set password as root methods. Other authentication methods are optional. It is up to the plug-in to determine which node native authentication allows cleartext authentication.